OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Crist J. Clark (crist.clarkattbi.com)
Date: Sun May 19 2002 - 03:18:38 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Sat, May 18, 2002 at 11:50:03PM +0400, Yuri A. Kabaenkov wrote:
    > Hello Jakub,
    >
    > Saturday, May 18, 2002, 10:40:38 PM, you wrote:
    >
    > There is another bug with this sysctl variable.
    > For example to see all processess with kern.ps_showallprocs=0 you can do this:
    >
    > $ cd /proc;

    The kern.ps_showallprocs sysctl(8) setting has absolutely no influence
    on the procfs(5).

    If you are interested in securing your system, you should not be
    mounting a procfs(5) at all. It has a checkered security history, and
    although there are no currently known holes (besides the treasure
    trove of info it can leak), it is suspect. Very few things depend on
    it (some obscure options of ps(1) are one of the few places it is
    used). 

    -- 
Crist J. Clark                     |     cjclarkalum.mit.edu
                                   |     cjclarkjhu.edu
http://people.freebsd.org/~cjc/    |     cjcfreebsd.org